mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-04 08:24:42 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Update how to setup a policy namespace for containers

John Johansen 2019-05-21 05:23:48 +00:00
parent 64945c059a
commit 5149db8eac
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
how-to-setup-a-policy-namespace-for-containers.md

@ -25,6 +25,9 @@ lsm=apparmor
??? link anchor to setting config/lsm/grub default
### No host policy on container
If there is no policy defined at the host level for the container tasks then, a plain transition to the apparmor policy namespace for the container can be done.
```
sudo mkdir /sys/kernel/security/apparmor/policy/namespaces/${NS_NAME}
aa-exec -p ":${NS_NAME}:unconfined" -- ${CONTAINER_CMD}